CVE-2008-3507: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in LiteNews 0.1 aka 01, and possibly 1.2 and earlier, allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action...

Request It 1.0 (index.php id) Remote File Inclusion Vulnerability

No description provided by source. Request It v1.0 Remote File Inclusion Vulnerability Ghost Hacker , R-h Team , Real Hack We Will Be Back Soon : Found by : Ghost Hacker |, .-. .-. ,| My Home : Real Hack We Will Be Back Soon & v4-Team.com | o/ \o | My Blog : http://gh0st10.wordpress.com |/ /\ | M...

CVE-2008-3498: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the nBill comnetinvoice component 1.2.0 SP1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter in an orders action to index.php. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in eStoreAff 0.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter in a showcat action to index.php...

CVE-2008-3484

SQL injection vulnerability in eStoreAff 0.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter in a showcat action to index.php...

dayfox-lfi.txt

..:::::Dayfox Blog LOCAL FILE INCLUSION Vulnerbility ::::... Virangar Security Team www.virangar.net -------- Discoverd By :Virangar Security Team hadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Ali007,Zahra & all virangar members & all iranian hackerz greetz:to my best friend in the...

CVE-2008-3484: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in eStoreAff 0.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter in a showcat action to index.php...

CVE-2008-3448

Cross-site scripting XSS vulnerability in index.php in common solutions csphonebook 1.02 allows remote attackers to inject arbitrary web script or HTML via the letter parameter...

CVE-2008-3448

CVE-2008-3448 describes a cross-site scripting (XSS) vulnerability in the web application feature: index.php in the product “csphonebook 1.02” from common solutions . The issue arises when an attacker supplies a crafted value in the letter parameter, allowing injection of arbitrary web script or ...

CVE-2008-3448: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in common solutions csphonebook 1.02 allows remote attackers to inject arbitrary web script or HTML via the letter parameter...

CVE-2008-3445: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in phpMyRealty PMR 2.0.0 allows remote attackers to execute arbitrary SQL commands via the location parameter...

syzygyCMS 0.3 (index.php page) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================= syzygyCMS 0.3 index.php page Local File Inclusion Vulnerability ================================================================= + syzygyCMS 0.3 Local File Inclusion +...

CVE-2008-3405

CVE-2008-3405 describes a directory traversal vulnerability in the nzFotolog web application ( Ricardo Amaral nzFotolog 0.4.1 ). The flaw is in index.php where attackers can craft the action_file parameter to traverse directories and include/execute arbitrary local files on the server. Impact is ...

CVE-2008-3405: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Ricardo Amaral nzFotolog 0.4.1 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the actionfile parameter...

EPShop 'index.php' SQL注入漏洞

BUGTRAQ ID: 30387 CNCAN ID：CNCAN-2008072903 EPShop是一款基于PHP的WEB应用程序。 EPShop不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息或操作数据库。 问题是'index.php'脚本对用户提交的'pid'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 EPShop 目前没有解决方案提供： http://comsenz.com/products/ecshop...

[DSECRG-08-033] Local File Include Vulnerability in Pixelpost 1.7.1

Digital Security Research Group DSecRG Advisory DSECRG-08-033 Application: Pixelpost photoblog Versions Affected: 1.7.1 Vendor URL: http://www.pixelpost.org/ Bug: Local File Include Exploits: YES Reported: 22.07.2008 Vendor response: 23.07.2008 Solution: YES Date of Public Advisory: 28.07.2008...

Sql injection

SQL injection vulnerability in index.php in Live Music Plus 1.1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a Singer action...

CVE-2008-3344: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in staticpages/easyecards/index.php in MyioSoft EasyE-Cards 3.5 trial edition tr and 3.10a allow remote attackers to inject arbitrary web script or HTML via the 1 ResultHtml, 2 dir, 3 SenderName, 4 RecipientName, 5 SenderMail, and 6 RecipientMail...

CVE-2008-3348: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in staticpages/easycalendar/index.php in MyioSoft EasyDynamicPages 3.0 trial edition tr allows remote attackers to inject arbitrary web script or HTML via the year parameter...

CVE-2008-3345: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in staticpages/easyecards/index.php in MyioSoft EasyE-Cards 3.5 trial edition tr and 3.10a, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the sid parameter in a pickup action...